Abstract: An approach for supporting security in a communications network is disclosed. A network device includes a security peer that establishes a secure tunnel over a data network (e.g., satellite network) for transport of encrypted traffic. The device also includes a performance peer for establishing a connection supported by the secure tunnel. The performance peer includes a plurality of modules for providing respective performance enhancing functions to minimize performance impact of latency of the network.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: An approach is provided for supporting retrieval of a web page over a data network from a web site is disclosed. A downstream proxy communicating with a host executing a browser receives a request message from a browser to retrieve the web page. An upstream proxy parses the web page to determine an object embedded in the web page, wherein a promise list is generated specifying the embedded object that is to be pre-fetched according to a criterion. The promise list is transmitted to the downstream proxy, wherein the upstream proxy pre-fetches the embedded object from the web site. The upstream proxy determines whether to forward one of the pre-fetched embedded object to the downstream proxy based on a comparison of cookies associated with one of the pre-fetched objects supplied, respectively, by the browser and the web site. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

Abstract: An approach for routing over a radio network is provided. A terminal receives a packet over the radio network, which supports meshed connectivity, wherein the packet is destined for a destination host. The terminal determines whether the destination host is reachable by a communication interface based upon a route table, and selectively redirects the packet over the radio network according to the route table. A route server is provided to collect routes from the terminal as well as other terminals within the radio network. The route server then disseminates the collect routes to the terminals for updating of their respective route tables. The present invention has particular applicability to a fully meshed satellite network.

Abstract: A network apparatus for performing functions to enhance performance of a communication network is provided. The network apparatus includes a spoofing module that is configured to selectively spoof a multiple connections associated with a multiple hosts based upon corresponding spoofing criteria and to provide local acknowledgement of received messages over the connections. Additionally, the network apparatus includes a connection module that multiplexes the connections over a common backbone connection, and a prioritization module that prioritizes access to the backbone connection based upon prioritization criteria. Further, the network apparatus includes a path selection module that determines a path to transmit the received messages based upon path selection criteria. The spoofing module allocates a connection control block corresponding to a spoofed connection. Each of the connection control blocks stores information related to the connections.

Abstract: A network apparatus for providing performance enhancements of a communication network is disclosed. The network apparatus includes a plurality of communication interfaces that are configured to receive and to forward messages according to a prescribed protocol. The network apparatus also includes a plurality of modules configured to process the messages to effect performance enhancing functions. Further, the network apparatus includes a plurality of buffers that are configured to store the received messages and messages that are generated by one of the plurality of modules. A portion of the plurality of buffers is shared by the plurality of modules based upon execution of a particular one of the performance enhancing functions. Each of the plurality of buffers has a data structure that includes an expandable header to accommodate different message types. The present invention has particular applicability to a bandwidth constrained system, such as satellite network.

Abstract: A multiple group variable focal length lens is provided. The lens has a first lens group including a variable power lens element and is positioned in a stationary manner along an optical axis. The lens also has a second lens group moveably positioned along the optical axis. The variable power lens element can be an electrically controllable liquid lens having a surface with a variable radius of curvature created by two liquids having distinct indices of refraction with one of the liquids having an index of refraction greater than 1.60. Alternatively or additionally, at least one of the liquids used in the liquid lens can include nanoscale particles.

Abstract: An imaging apparatus (40) has an optical sensor (14) with sensing elements (18). Each sensing element (18) has an array of sensing components (28). Each sensing component (28) provides a signal corresponding to a pixel for forming an image as an array of pixels. A lens array (76) has a number of lens elements (66). Each lens element (66) directs light to a corresponding sensing element (18) in the optical sensor (14). A prism array (60) has a number of prism elements (62), each prism element (62) directing incident light from the image field toward a corresponding lens element (66) in the lens array (76).

Abstract: A nanocomposite optical plastic article has a plastic host material with a temperature sensitive optical vector (x) and a core shell nanoparticulate material dispersed into the plastic host material. The core shell nanoparticulate material is characterized by a core defined by a nanoparticulate material which has a temperature sensitive optical vector (x1) and a shell defined by a coating material layer coated onto the core. It is important to the invention that temperature sensitive vector (x1) is directionally opposed to the temperature sensitive optical vector (x) and nshell<nplastic host<ncore.

Abstract: A method and apparatus for enhancing the performance of a network by performing selective spoofing, i.e., determining whether or not to spoof a connection. Selective spoofing provides the ability to discriminate among different connections, only allocating TCP spoofing resources to those where spoofing will improve performance and assigning spoofing parameters based on the specific applications using the connections. The selective spoofing is applicable to a wide variety of communication links, including both slow and fast links, high latency links, and links with low and high error rates. The selective spoofing functions are used either alone or together with other performance enhancing features. Those features include spoofing the conventional TCP three-way handshake, local data acknowledgement, multiplexing multiple connections across a single connection, data compression/encryption, prioritization, and path selection.

Abstract: A nanocomposite optical plastic article has a plastic host material with a temperature sensitive optical vector (x) and a core shell nanoparticulate material dispersed into the plastic host material. The core shell nanoparticulate material is characterized by a core defined by a nanoparticulate material which has a temperature sensitive optical vector (x1) and a shell defined by a coating material layer coated onto the core. It is important to the invention that temperature sensitive vector (x1) is directionally opposed to the temperature sensitive optical vector (x) and nshell<nplastic host<ncore.

Abstract: An optical nanocomposite material has a nanoparticulate filler dispersed in a host plastic material. According to the method of making the nanocomposite material, a predetermined temperature sensitive optical vector, such as refractive index, of the plastic host material and nanoparticulate filler are directionally opposed resulting in a nanocomposite material having significantly improved stability of the refractive index with respect to temperature.

Abstract: In accordance with the teachings of the present invention, a mold comprises a nubbin positioned within the mold, and an actuator positioned within the mold to align the nubbin. The actuator may be implemented with a piezoelectric material, a magnetorestrictive material, an electrorestrictive material, etc. In one embodiment, the actuator is formed into a cylinder and placed around a nubbin in a mold. When the actuator receives a stimulus, the actuator constricts decreasing the size of the inner diameter. Decreasing the size of the inner diameter causes the actuator to constrict and align the nubbin along a centerline.

Abstract: A communication system having a proxy architecture is disclosed. The system includes a platform that provides performance enhancing functions. The platform includes a backbone connection apparatus that routes information within a communication system. The backbone connection apparatus receives backbone connection parameters from the platform and maintains the current parameters in one or more backbone connection profiles. The backbone connection apparatus routes packets of information throughout the communication system based on the backbone connection profile. The backbone connection apparatus supports the use of different backbone protocol for different types of backbone links. Further, in a configuration where multiple backbone links of different types exist, the backbone connection apparatus supports the use of a different backbone protocol for each type of link at the same time.

Abstract: A communication system having a proxy architecture is disclosed. The system includes a platform that provides performance enhancing functions. The platform includes a path selection/activation apparatus that routes information within a communication system. The path selection/activation apparatus receives path selection and path activation parameters from the platform and maintains the current parameters in one or more path selection/activation profiles. The path selection/activation apparatus routes packets of information throughout the communication system based on the path selection and/or path activation profile. The above arrangement has particular applicability to a bandwidth constrained communication system, such as a satellite network.

Abstract: A method and apparatus for enhancing the performance of a network by performing selective spoofing. Selective spoofing provides the ability to discriminate among different connections and only allocate spoofing resources to those connections for which spoofing will actually improve performance. The selective spoofing functions described are applicable to a wide variety of communication links, including both slow and fast links, high latency links, and links with low and high error rates. The selective spoofing functions may be implemented either alone or in combination with other performance enhancing features, such as, spoofing the conventional TCP three-way handshake, local data acknowledgement, multiplexing multiple connections across a single connection, data compression/encryption, prioritization, and path selection. The selective spoofing features described are particularly useful for links with high latency and/or high bit error rates.

Abstract: A method of manufacturing a light-conductive pipe is described comprising the steps of: forming a light pipe mold having an elongated cavity with two optical end faces and an opening for injecting molten material into the cavity distant from either optical end face; providing molten material from a supply of molten material; injecting the molten material through the opening; and cooling and solidifying the molten material to form a light-conductive pipe having an input optical face and an output optical face connected by an elongated body of light-conductive material. Also descried are injection molded light-pipes formed by the method, and integrated linear arrays of injection molded light-conductive pipes formed by the method.

Abstract: A light-conductive pipe is described comprising a body of light-conductive material having an input face having a first cross sectional perimeter at a first end and an output face having a second cross sectional perimeter at a second end, and at least one integral alignment feature projecting from the body providing a third cross-sectional perimeter larger than at least one of the first or second perimeters of the faces, wherein the projecting alignment feature does not have a surface in the same plane as either face. Also described are integral linear arrays of multiple light-conductive pipes, two-dimensional arrays formed from multiple aligned individual light-conductive pipes or stacked integral linear arrays, and expanding optical faceplates formed from such two-dimensional arrays.

Abstract: An apparatus for making microlens molds and microlens array molds is described which utilizes a forming element having a rotating half radius diamond cutting member. A substrate is alignably arranged with the diamond cutting member so that the cutting member can mill a mold cavity in the substrate. The apparatus can be used to make high sag lens molds with high accuracy and a nearly 100% fill factor.